Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E9vp61THuIZPRHMS99OXxSsHEng.roa
File:                     E9vp61THuIZPRHMS99OXxSsHEng.roa (raw, json)
Hash identifier:          wI0K41Xp/cPgEh3ne/cpY2KaBzo1iqzLEditixgC4xo=
Subject key identifier:   13:DB:E9:EB:54:C7:B8:86:4F:44:73:12:F7:D3:97:C5:2B:07:12:78
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E9vp61THuIZPRHMS99OXxSsHEng.roa
Signing time:             Thu 15 Sep 2022 02:53:09 +0000
ROA not before:           Thu 15 Sep 2022 02:53:09 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:09 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=13DBE9EB54C7B8864F447312F7D397C52B071278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:1c:7e:a9:d8:8f:01:c1:da:ec:99:4c:58:
                    01:43:69:82:4d:e2:11:86:30:20:57:1c:db:07:23:
                    c6:33:7c:14:d9:18:5d:2a:17:08:65:91:5f:6e:b9:
                    b3:d8:ef:c1:89:d2:8c:5a:e8:0b:fe:e9:d7:2e:95:
                    54:b9:27:87:93:38:b2:25:cb:96:ec:07:5b:a3:95:
                    90:15:94:a7:8f:b2:a8:8c:12:6e:45:6c:9e:9f:93:
                    a7:d5:d4:b0:64:4d:21:2d:32:30:ff:cf:b8:51:b6:
                    ab:82:12:cd:4e:75:2e:30:b9:33:f8:80:05:99:11:
                    ee:4a:9e:26:7a:cd:82:61:cc:cb:f2:91:62:66:98:
                    50:77:39:66:c0:3d:c2:fc:c0:f0:e4:68:2a:07:36:
                    ee:0c:94:6e:41:23:c0:17:00:95:08:b1:d7:ea:ba:
                    ea:b1:59:bc:02:c3:a1:91:69:32:be:51:29:d8:e9:
                    80:11:f1:e2:5b:4e:bd:27:bb:5a:05:be:68:cc:91:
                    0b:2b:4d:d7:e0:03:07:a2:8c:42:e5:4c:ce:38:9a:
                    ea:d7:11:fc:ff:f1:d1:8e:3c:df:d3:08:45:07:fb:
                    aa:17:ac:15:38:bd:75:a2:cc:ea:cd:07:ad:e6:02:
                    55:1d:5a:3b:89:10:02:8b:14:a4:7f:4e:95:8e:9b:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DB:E9:EB:54:C7:B8:86:4F:44:73:12:F7:D3:97:C5:2B:07:12:78
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E9vp61THuIZPRHMS99OXxSsHEng.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:6b:18:0c:a5:06:c6:db:b3:c1:46:b5:ef:ee:3e:c7:15:bd:
         e7:38:af:0e:9c:de:df:a4:12:77:5e:45:7b:c5:a2:03:a5:0c:
         41:b9:a8:f1:2a:4f:5a:20:b7:83:b2:80:1c:77:72:07:e1:2e:
         d3:04:59:08:b2:9a:b5:59:71:79:b5:fb:51:fe:c5:7e:41:38:
         58:18:54:c2:8b:e7:04:59:81:02:d6:d6:74:10:c8:2c:ed:fd:
         29:cd:7c:64:2e:5b:65:be:81:8e:59:88:15:bb:7f:f5:0c:fd:
         1f:65:95:25:30:39:be:bb:89:45:6c:62:23:0c:ab:03:ba:ba:
         dd:2c:69:f9:43:fe:1e:74:19:e5:e0:44:7b:f6:dc:b3:49:dc:
         0c:84:df:20:73:1d:6d:8f:a5:57:c4:23:10:87:86:30:9d:55:
         98:0c:1d:f2:8c:35:7f:19:53:ca:8a:18:2e:1c:45:4b:d9:93:
         26:ab:bd:d3:58:c8:26:de:23:2f:cc:98:52:2e:40:7d:9a:4d:
         15:2c:bb:f0:51:6f:e0:d2:f0:e7:1a:95:48:c8:94:9e:cd:10:
         1b:89:6a:8b:4f:d4:61:5b:4d:e8:17:85:04:f9:37:ca:17:8a:
         3b:79:0c:6c:54:37:0e:27:67:20:3e:07:a9:41:44:23:aa:ac:
         7c:3a:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org